Behavioral task
behavioral1
Sample
2048d213e3a96c779e50c05c82b7e841f4911fb6b5633d0a1ff5b6fe793a3d52.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2048d213e3a96c779e50c05c82b7e841f4911fb6b5633d0a1ff5b6fe793a3d52.exe
Resource
win10v2004-20220812-en
General
-
Target
2048d213e3a96c779e50c05c82b7e841f4911fb6b5633d0a1ff5b6fe793a3d52
-
Size
159KB
-
MD5
a268a7bf694f67590d78d89f95081a00
-
SHA1
9870093a2c92acd28f78937a343b6a3c1e10e47b
-
SHA256
2048d213e3a96c779e50c05c82b7e841f4911fb6b5633d0a1ff5b6fe793a3d52
-
SHA512
998d7c84b62ff5400aec4e69d77012a9fd233dd253086627ff893cd41b8b9ccde63e19fc2880e04db674dd87e526462565bffd1b6906b6ef74be93d15f7823a3
-
SSDEEP
3072:yxTqpdA3f6QNf2IPO4DpmWpAsfYbTOBoefYi6a9k20tAvnkzkuI9i:02pdqfv2IPOGfXf5ovWvakU
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
2048d213e3a96c779e50c05c82b7e841f4911fb6b5633d0a1ff5b6fe793a3d52.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE